Overview

overview

10

Static

static

10

26bf96d8a9...kes118

debian-9-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    26bf96d8a95dcbc0f5f8317adbac3b4e_JaffaCakes118
  • Size 126KB
  • Sample240329-tthwbach34
  • SHA256 b8fd5494786a392565ffe16d76be6ba6b8c6abbb2a7eae219e7fa67fb2b058e6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gafgyt

Malware Config

Targets

    • Target
      26bf96d8a95dcbc0f5f8317adbac3b4e_JaffaCakes118
    • Size 126KB
    • SHA256 b8fd5494786a392565ffe16d76be6ba6b8c6abbb2a7eae219e7fa67fb2b058e6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks